openluopworld 08fd463ee4 bugfix: if the len of iv is not 96-bit, y0 can be calculated incorrectly ...

An initialization vector IV can have any number of bits between 1 and
2^64. So it should be filled to the lower 64-bit in the last step
when computing ghash.

Signed-off-by: openluopworld <luopengxq@gmail.com>

2021-09-19 11:20:03 +08:00

38 KiB

Raw Blame History

View Raw